Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
File: kBqfnorkBi5SGbdlLY6f7n7FrjM.mft (raw, json)
Hash identifier: jZKAYu9IF9xKmeS7yHJNIha0xUoT/W0PTNhwSMS8/8Y=
Subject key identifier: 16:8F:44:65:C9:59:9B:7D:F7:23:35:F3:8C:2F:43:08:EC:55:98:B7
Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
Certificate issuer: /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
Manifest number: 5A
Signing time: Fri 31 Jan 2025 06:09:06 +0000
Manifest this update: Fri 31 Jan 2025 06:09:05 +0000
Manifest next update: Fri 07 Feb 2025 06:09:05 +0000
Files and hashes: 1: kBqfnorkBi5SGbdlLY6f7n7FrjM.crl (hash: +6fZaBS8b21qKN3xjfER9VBUv4gZmaIdkzfT/O9PeRA=)
2: B377200E5ADD11EF9A462440C4F9AE02.roa (hash: ku0nQgImAfjqlfmOWSwIKN/zsrk6kYnMycZSjI2lh3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Validity
Not Before: Jan 31 06:09:05 2025 GMT
Not After : Feb 7 06:09:05 2025 GMT
Subject: CN=679c6901-e0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:af:69:0d:a0:85:6c:31:25:29:47:5e:17:68:
e1:31:45:04:da:5a:d8:37:69:97:da:60:d1:15:0f:
91:ca:98:18:db:99:11:cb:21:96:45:5b:99:5f:23:
4e:03:0a:dc:9e:33:0e:98:56:92:0c:cc:a4:34:20:
e9:84:1b:14:6a:33:06:7f:e2:bb:99:27:1a:93:be:
36:c6:c7:5b:5d:32:cb:0f:2f:79:76:86:7d:7b:2c:
c1:14:f5:93:25:75:1e:e0:00:e0:b8:3b:d9:30:12:
b3:ce:7d:d9:a6:a2:8b:a1:56:d3:a8:0b:14:d7:a6:
ed:65:d1:ff:9b:b2:ba:82:16:29:7a:88:f3:f3:fc:
0c:c9:fc:2a:3a:d2:ba:c9:b0:69:3e:fd:90:70:bf:
b9:2e:fe:4a:a3:48:22:f3:ea:f8:34:36:85:0d:f6:
7f:0c:5f:3e:21:3e:df:b2:73:59:e7:a3:18:53:fc:
af:85:ee:5b:b6:32:8b:ab:b5:d5:c8:1b:e0:09:73:
94:b5:a0:1f:c5:df:45:86:b9:5b:ad:a0:66:e9:b4:
f5:34:e7:df:92:b4:5f:97:6c:d1:da:cc:25:75:bd:
4d:4f:d4:81:05:1b:49:b1:df:36:ab:8a:c5:b5:73:
47:b9:2b:55:d7:fe:60:6b:9a:4f:96:19:e8:9d:b5:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8F:44:65:C9:59:9B:7D:F7:23:35:F3:8C:2F:43:08:EC:55:98:B7
X509v3 Authority Key Identifier:
keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:6e:4b:ea:79:95:86:a1:c6:ce:45:d2:c2:2b:d7:72:22:9c:
16:58:1f:e1:6e:98:8d:4c:4a:d8:4c:83:27:ab:86:b9:05:99:
32:ef:ff:7a:0d:33:25:3a:42:90:c3:2e:5a:75:2a:fb:a3:94:
7b:3e:da:b5:ca:a6:66:75:13:7a:56:d0:3d:37:f3:94:d8:c3:
b9:da:25:8f:20:ee:7f:b3:f7:07:a6:88:ba:6f:1d:38:bb:45:
88:e7:60:ac:2f:00:13:50:8e:5c:b4:96:04:79:4b:42:0b:9d:
69:b7:25:10:26:10:8c:87:0b:66:f7:db:f4:7c:d8:fa:5f:47:
66:16:30:3e:5c:e4:21:32:be:0a:09:bd:03:02:9a:21:2f:6f:
a8:13:50:ff:45:8b:d3:38:43:ef:bc:b1:5a:43:53:d8:c4:71:
4a:76:a6:6a:4d:8a:0d:f6:7e:b1:0f:2d:88:86:0b:69:37:cb:
5d:73:40:58:f5:2a:f2:f4:dd:dd:47:db:eb:23:a0:09:a4:9e:
9c:c4:79:07:51:68:78:78:8a:4b:b5:87:26:65:71:d6:0d:ec:
83:c0:60:25:af:1c:19:9c:90:e5:f7:29:31:b1:70:f1:1a:7e:
d3:4b:a9:cc:25:3d:a1:45:6c:4c:0b:ba:6d:62:49:b1:a1:92:
4f:17:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:36 2025 by rpki-client